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Industrial robot 
TECHNICAL FIELD 

5 

The present invention relates to a communication system for safe wireless control 
of a maneuverable object. Such a communication system comprises a control imit 
with operating means for controlling the object and receiving means for wireless 
irrformation. It also comprises a portable operating vmit with sending means for 
10 wireless information. The information is transmitted in time slots, each containing 
a data package. 

The present invention also relates to an industrial robot comprising a manipu- 
lator with a plurality of moveable members, a control unit with means for 
15 automatically operating the manipulator and receiving means for wireless 

information. Further the robot comprises a portable operating unit with sending 
means for wireless information, where said information is divided in time slots, 
each containing a data package. 

' 20 Further the present inveiition comprises a method for safe wireless control of an 
industrial robot. The metiiod comprises an operation unit sending in time slots 
information to the control tmit, where said information is divided in time slots, 
eadi containing a data package. 

25 

BACKGROUND OF THE INVENTION 

In order to accomplish a safe control of a moveable object such as an industrial 
robot it is essential to have absolute confidence in the control of the object. As an 
30 object in this context should be xmderstood any stationary or mobile moveable 
object. The operator must be fully confident that the commanded order is 
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effected. Any other person or machine must not be able to interfere with the 
control of the object on purpose or by accident. 

In a system where an operating tmit is connected to a control unit via a cable this 
5 is easy. Such a cable is preferably shielded and no other commxmication system 
can interfere with the two coxmected units. The cable is however heavy and stiff 
thus making the operation of the operating tmit cumbersome. Another problem 
with a cable connection is that the cable often is getting entangled in loops thus 
making it difficult to stretch it out. When a plurality of robots are placed together 

10 in a ceU the cables often are entangled themselves thus making it difficult to find 
out which operating imit belongs to which robot. Finally there is the risk of the 
cable being damaged especially when a vehicle is running over it. If the cable is 
damaged it is involving much work to have it repaired or exchanged. It is there- 
fore a long lasting desire in the industry of industrial robots to carry out robot 

15 control without a cable. 

The obvious solution is a wireless control system. The need described above then 
will be very obviously solved. Controlling an object with a wireless system where 
the air could contain a pliirality of simultaneous coiranand messages involves^ 

20 however, other problems. The receiving part of a specific control system must 
find out and recognize a control message addressed to that specific control unit 
and effectuate that command. It is in such an envirormient obvious that some- 
times different signals will interfere with each other. It is also obvious as flie 
operating unit is moved around lhat sometimes tihe aerial will be located in a 

25 "radio shadow" thus no signal from the unit will be received by the control unit. 
In such cases there must be a control system which accoimts for time slots where 
no signal is received and for a correct action accordingly. 

From "Gebrauchsmuster" DE 297 10 026 Ul a wireless control of an industrial 
30 robot is previously known. A mobile operating tmit has a wheel knob that sends 
pulses via a Digital European Cordless Telephone PECT) module to a numeric 
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control device. The safety aspects of this wireless control is not mentioned in the 
document. There is thus notiiing mentioned on how to proceed when a signal is 
not received by tiie receiving part. 

5 Another wireless control system is previously known from JP 11073201. The 
problem solved in this document is the commtmication of an emergency stop 
control carried out by wireless means in a manner equivalent to a cable commu- 
nication. Under normal conditions the controller periodically transmits data to 
the operating imit. Upon receiving this data the operating unit responds by 

10 transmitting a response signal back to the controller. Thus the control unit asks 
the operating vmit if this is in function. The reason for making the communication 
intermittent is that data, if transmitted and received at every time, increases the 
electric power consumption of the battery-operated teaching imit. The length of a 
time period however is not mentioned. The controller judges from said response 

15 signal that the operating imit is in normal condition. If ihe emergency switch has 
been activated the response signal carries that information and the controller 
executes the emergency stop. 

Under abnormal situations, that means when the operating unit is not in a correct 
20 function mood, the operating imit transmits no response signal. Based on the ab- 
sence of a response from the operating imit the controller outputs the conclusion 
that there is an "emergency stop condition". 

From JP 9117888 another control system is known the object of which is to 
25 provide a remote control with an emergency stop function. The system is said to 
ensure safety while cutting costs by making possible to carry out the remote 
control of a robot etc by transmitters for wireless remote controllers or by serial 
wired communication means. According to the system an operator is actuating a 
control permit switch by means of a key operation. A base signal is then 
30 continuously transmitted from the transmitter of the operating unit. When 
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driving control switches are activated a driving control signal is transmitted in 
addition to the base signal. 



A control part of the system is provided in the object to be controlled. When a 
5 continuous base signal is received and driving control signals are received in 
addition to this the driving means is then controlled. When, however, the base 
signal is interrupted the driving is stopped irrespective of the existence of other 
signals. Thus an emergency stop function is achieved by reliably stopping the 
driving means when the actuation of said control permit switch is released. 

10 

The signal is sent in time slots, which has a typical length of 108 ms, and contain a 
leader code (A), a control permit code (C) also known as base signal and a switch 
code (B). In the absence of the base signal the power source of the driving control 
means is cut of and the motor is stopped irrespective of the other signals. Thus 
15 when the need for an emergency stop arises the motor is reliably stopped when 
the operator stops operating the key of the servo control permit switch. Also 
when the signal between the transmitter and the robot is cut off or when the 
transmission is poor the power source is cut of from the driving control means 
thus effecting an emergency stop function. 

20 

Both of these Japanese documents describe the execution of an emergency stop in 
the absence of a base signal sent from an operating device. However, an emer- 
gency stop is not wanted when a signal from the operating unit is just lacking for 
a short moment. There will always be moments when such a base signal is not 
25 received for one or more time slots. This, however, does not call for an emergency 
stop execution. 

When an emergency stop is executed the whole robot cell or even several cells 
will be cut of from electric power. To reset an emergency stop a plurality of 
30 checks has to be made and the cell will be out of work for a considerable time. 
This is therefore a not wanted situation. 
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SUMMARY OF THE INVENTION 

5 A primary object of the present invention is to devise ways to find a solution to a 
safe wireless control of a moveable object. Such a control system shall control the 
object even under conditions when commvmication is ppor and when a data 
signal is missing for short periods of time. The control system shall also execute 
an emergency stop on command or when the wireless commimication is broken. 

10 

These objects are achieved according to tiie invention in a first aspect witix a 
commimication system according to the features in the characterizing part of tiie 
independent claim 1, in a second aspect according to an industrial robot accor- 
ding to the characterizing features of the independent daim 13, and in a third 
15 aspect according to a method according to the characterizing features of the 
independent daim 21. Preferred embodiments are described in the dependent 
daims. 

According to the first aspect of the invention a communication system for safe 
20 wireless control of a maneuverable object is disdosed where a receiving means 
comprises detecting means for detecting in a time part of a time slot the presence 
of a data package and calculating means for calculating upon a reception failure 
the number of time parts having no presence of said data package following a 
time slot with presence of said data package whereupon the control unit exerdses 
25 a control command when a data package has been received within a number of 
time parts just exceeding a full time slot. 

The prindple of a wireless safety loop is based on transmitting a continuos stream 
of data packages, each within a time slot of a specified maximum gap, from the 
30 operating unit to the control unit. This stream of data packages will be sent even 
when the operating imit does not actively control the robot. On the controller side 
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a watchdog device witti a specified timeout is implemented. The control imit thtis 
comprises an electronic hardware means with a processor, which in the absence 
of a software product running the processor will execute a safety stop of the 
object. The watchdog device looks for the necessary software pieces in the data 
5 packages received from the operating imit. If there is no such software piece in 
the data package or there is no data package at all the watchdog executes a safety 
stop. If during the following time slots there is no software piece or no data 
packages for a predefined time interval the watchdog executes an emergency 
stop. A typical time slot would be 100 ms. 

10 

In a wireless link there is no guarantee for a continuos connection. There will be 
short breaks caused by multipath fading etc. There could also be longer breaks 
caused by radio path obstructions and such. Finally tiiere could be long-lasting 
breaks caused by batteiy failure. There are thus tiuree different time windows that 

15 calls for different action by the watchdog. For short breaks, that is in the area of 
1.5 time slots the control of the object should not be affected. The optimimi watch- 
time for the watchdog when there is no time mismatch would be a time slot plus 
the length of a data package. For longer breaks, that is, up to about 500 ms the 
watchdog should execute a safety stop. That means that when the watchdog 

20 detects a new data package wittiin that time the control of tiKe object should 
continue. But when the break last for longer than 500 ms an emergency stop 
should be executed. 

In a further embodiment of this aspect of the invention the sending means and 
25 the receiving means are parts of a wireless local area network. In yet another 
embodiment, this local area network is a Bluetooth network. 

In a further embodiment of the invention the data package contains an address 
part, an instruction part, a data part and an identifying part. In one embodiment 
30 the data is encrypted. The data part is carrying data for controlling flie object. The 
data is also carrying enabling information, emergency stop execution and soft- 
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ware pieces for the watchdog means. Preferably tiie data comprises operating 
commands that contain movement instructions that allow tiKe object to move for 
at least one time slot in advance. Preferably it will last for one and a half time slot. 
If thus these operating commands arrive in each time slot, the commands are 
5 overlapping each other thus giving the object a smooth movement. The over- 
lapping will also ensxire a smooth operation if there is a clock mismatch between 
the operating ixnit and the control unit. 

In one embodiment, the coirunand contains a movement allowance for just over 
two time slots. This will assure a smooth operation if there is a missing data 
package in one time slot only! On such reception f ailxire in just one time slot the 
next command will stiU overlap the command under execution, thus giving the 
object a smooth movement. 

According to the second aspect of the invention an industrial robot is disclosed 
where a receiving means comprises detecting means for detecting in a time part 
of a time slot the presence of said data package and calculating means for 
calculating the number of time parts having no presence of said data package 
following a time slot with presence of said data package, whereupon the control 
imit on presence of an enabling signal in the data package exercises a control 
command when a data package has been received within a ntimber of time parts 
just exceeding a full time slot. 

In a further embodiment of the invention, the control tmit further comprises 
means for putting the manipulator in a safety stop condition after a reception 
failure during a nimiber of time parts exceeding a full time slot. An emergency 
stop will be exercised after a reception failure during a predetermined number of 



time parts. 



In a further embodiment of flvis aspect of the invention, the portable operating 
unit comprises display means, jogging means, and an emergency stop imit. Yet in 
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another embodiment ttie data package contains control command which enables 
the manipulator to move for a predefined time exceeding one time slot 

According to the third aspect of the invention, a method is disclosed which 
5 involves the steps of: 

dividing each time slot into time parts, 

determining the presence of a data package received by the control tinit 
within each of said time part, 

calculating upon reception failure the ntimber of time parts with no 
10 presence of said data package following .a time slot with presence of said data 
package, and 

exercising the control of the manipulator upon reception of said data 
package within a nximber of time parts exceeding a full time slot. 



15 In a further embodiment of this aspect of the invention the exercising step of the 
method further comprises putting the robot in a safety stop condition upon 
reception failure during a time period corresponding to a number of time parts 
exceeding a full time slot. An emergency stop is exercised upon reception failure 
during a time period corresponding to a predefined number of time parts 

20 exceeding a full time slot. 



BRIEF DESCRIPTION OF THE DRAWINGS 

25 Other features and advantages of the present invention will become more 

apparent to a person skilled in the art from the following detailed description in 
conjvinction with the appended drawings in which: 

FIG 1 is a wireless communication system according to the invention , and 
FIG 2 is plurality of data packages. 



30 
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DETAILED DESCRHTION OF THE INVENTION 



The wireless system shown in fig 1 comprises a control unit 1, a moveable object 
3, which in this embodiment is a manipulator and an operating unit 2. The control 

5 imit comprises a operators panel 10 for ease of an operator and an emergency 
stop switch 9 for executing an emergency stop. The control unit also comprises an 
antenna 11 for commimication with the operating imit. A watchdog for executing 
a safety stop condition upon commimication failure is also incorporated in the 
control unit- The operating tmit comprises a portable box 12 containing a display 

10 means 4, function keys 7, a joystick 6, an emergency stop device 5 carrying an 

emergency stop button and an antenna 8 for commimication witii the control unit 
1, The display means is used for all sorts of information preferably commxmicated 
from tiie control tmit. The display means may comprise a touch screen by whidi 
irrformation can be introduced to the control unit. The joystick is used to execute 

15 movement command to the manipulator and the function keys are used to alter 
the function of the joystick. 

The operating unit may also comprise a slot 13 for receiving an identity means for 
identification of tihe specific robot to control. The identity means may comprise a 
20 key device with a physical pattern to identify the correct robot. It may also 

comprise an electronic hardware in a slideable form such as a card. Preferably the 
electronic identity device comprises a processor which by running a computer 
program executes the identity of the robot to be controlled. In a furttier embodi- 
ment the identity is carried by tiie emergency stop, 

25 

In fig 2 a typical piece of signal from the operating unit to the control imit is 
shown. The signal is divided in time slots t. by the delimiters 20. According to the 
figure there are three time slots, each containing a data package 21. Each data 
package contains complete information to control the robot as well as a software 
30 piece to feed the watchdog. The length of a time slot is typically 100 ms. Length in 
this context is in the time domain and measured in seconds or fractions thereof. 
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Preferably the length of a data package is a fraction of a tiine slot Each data 
package comprises an address part 22, a function part, a data part 23 and an 
identifying part 24. The data part is canying an operation command. 

5 In order to obtain an overlook of the information the presence of a data package 
within a time slot is being watched. In a first sense it is of great value that the 
robot can move continuously and not being interrupted. To accomplish this the 
operation instruction allows the robot to move for a predetermined piece of time. 
Preferably this time piece is a bit longer than a time slot. This means that when 
10 the next operation command arrives the robot is already moving and the new 
operation command will take over tfie ongoing movement and give the robot 
permission to move another predetermined piece of time. 

Due to interference, poor commimication and such there will be time slots where 
15 a data package will not appear in the receiving unit of tiie controller. It will be 
much more common that a data package will be absent in one time slot only than 
over a plurality of time slots. Losing contact with the operating imit for one time 
slot only is not a safety hazard and therefore an object of the invention is to over- 
come short black outs. Hence the presence of data packages in the information 
20 signal is watched in time intervals longer than one time slot. Such time interval is 
preferably longer than one time slot plus the length of one data package. This 
time length is called watch time t^. To accomplish this tiie time slot are divided 
into time parts tp. The watch time is tiien the length of adjacent time parts just 
longer than a time slot. 

25 

When combining the effect of letting the robot move for a predetermined piece of 
time which may be as long as the watch time the missing of a data package in one 
time slot but present in the next the watchdog will cause the robot to move 
continuously. If however a data package is missing in two adjacent time slots the 
30 watchdog in the control unit will put the robot in a safety stop condition. It is of 
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course witiun the invention to have the watch time defined to any ntunber of time 
slots with or without the addition of the length of a data package. 

Time slots with absence of data package following a time slot with presence of a 
5 data package will be counted. If the communication is down for a longer time due 
to failure such as low battery, the watchdog in the control unit will exercise an 
emergency stop after counting a predetermined number of time slots without a 
data package. 
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CLAIMS 

1. A communication system for safe wireless control of an maneuverable object 
(3), comprising a control imit (1) having means for operating the object and 
receiving means (11) for wireless information, and a portable operating tmit 
(2) having sending means (8) for wireless information, where said informa- 
tion is divided in time slots (tj, each containing a data package (21), 
characterized in that the receiving means comprises detecting 
means for detecting in a time part (tp) of a time slot the presence of said data 
package and calculating means for calculating upon a reception failure the 
number of timie parts having no presence of said data package following a 
time slot with presence of said data package whereupon the control imit 
exercises a control command when a data package with correct information 
has been received witiiin a watch-time (t„) comprising a number of time parts 
just exceeding a full time slot. 

2. A commtmication system according to claim 1, characterized in that 
the control unit (1) further comprises means for putting the object in a safety 
stop condition after a reception failure during a first predetermined number 

• of time parts 

3. A communication system according to claim 2, characterized in that 
the first predetermined number of time parts exceeds a full time slot. 

4. A communication system according to claim 2, c h a r a c t e r i z e d in that 
the first predetermined niunber of time parts exceeds two full time slots. 

5. A commimication system according to any of the preceding claims, 
characterized in that the control tmit further comprises means for 
exercising an emergency stop after a reception failure during a second 
predetermined number of time parts. 
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6. A commimication system according to any of the preceding daims, 
characterized in that the time part is equal to half a time slot. 

7. A conunimication system according to any of the preceding claims, 
characterized in that the sending means and the receiving means are 
parts of a wireless local area network. 

8. Acommtmicationsystemaccordingtoclaim7, characterized in tihat 
the wireless local area network is a Bluetooth network. 

9. A commxmication system according to any of the preceding claims, 
characterized in that the data package (21) contains an address part 
(22), an instruction part (23), a data part (24) and an identifying part (25). 

10. A communication system according to claim 9, characterized in that 
the data part is encrypted. 

11. A commimication system according to claim 9, characterized in that 
the data part upon operating f ailiire contains an error detection code. 

12. Acommunication sy stem accordingtoclaim 9, characterized in that 
the data part contains an operating command that enables the object to move 
during more than one time slot. 

13. A commimication system according to claim 9, characterized in that 
the data part contains an operating command that enables the object to move 
during more than two time slots. 

14. An industrial robot comprising a manipulator (3) having a plurality of move- 
able members, a control xmit (1) having means for automatically operating the 
manipulator and receiving means (11) for wireless information, and a 
portable operating imit (2) having sending means (8) for wireless information, 
where said information is divided into time slots (tj, each containing a data 
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package (21), characterized in that the receiving means comprises 
detecting means for detecting in a time part (tp of a time slot the presence of 
said data package and calculating means for calculating the ntunber of time 
parts having no presence of said data package following a time slot with 
presence of said data package, whereupon the control tmit on presence of an 
enabling signal in flie data package exercises a control command when a data 
package has been received within watch-time (t^) comprising a number of 
time parts just exceeding a full time slot. 

15- An industrial robot according to claim 14, characterized in that the 
control imit further comprises means for putting the manipulator in a safety 
stop condition after a reception failure during a ntunber of time parts 
exceeding a full time slot. 

16. An industrial robot according to claim 14 or 15, characterized in that 
the control unit further comprises means for exercising an emergency stop 
after a reception failure dvuing a predetermined number of time parts. 

17. An industrial robot according to any of claims 14 to 16, characterized 
i n tiiat the portable operating xmit (2) comprises display means (4), jogging 
means (6), and an emergency stop unit (5). 

18. An industrial robot according to claims 14 to 17, characterized in 
that the time part is equal to half a time slot. 

19. An industrial robot according to claims 14 to 18, characterized in 
that the data package (21) contains an address part (22) an instruction part 
(23), a data part (24) and an identifying part (25). 

20. An industrial robot according to claims 14 to 19, c h a r a c t e r i z e d in 
that the data package contains control command which enables the 
manipulator to move for a predefined time exceeding one time slot. 
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21. Anindtistrialrobotaccordingtodaiinsl4to20,charact€rize d in 
tiiat the data part is encrypted. 

22. Anindxistrial robot according to claims 14 to 21, characterized in 
that the data upon operating failure contains an error detection code. 

23. Method, for safe wireless control of an indiistrial robot comprising a mani- 
pulator (3), a control imit (1) having means for automatically operating the 
manipulator and a portable operating uiut (2), comprising the operation unit 
sending information to the control unit, where said information is divided in 
time slots (tj, each containing a data package (21), characterized by 
the steps of: 

- dividing each time slot into time parts (tp), 

- determining the presence of a data package received by the control imit 
within each of said time part, 

- calctilating upon reception failxure the number of time parts with no 
presence of said data package following a time slot witii presence of said data 
package, and 

- exercising the control of the manipulator upon reception of said data 
' package within a watch-time (t„) comprising a number of time parts 

exceeding a full time slot. 

24. Method according to claim 23, characterized in that the exercising 
step further comprises putting the robot in a safety stop condition upon a 
reception failure diurihg a time period corresponding to a number of time 
parts exceeding a full time slot. 

25. Methodaccordingtoclaim23or24,characterized in thattiie 
exercising step further comprises exercising an emergency stop corrunand 
upon reception failure during a time period corresponding to a predefined 
number of time parts exceeding a full time slot. 
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26. Metiiodaccordingtoany of claiii\s23or25,characterize d in that the 
time part is equal to half a time slot. 



27. 



Method according to any of claims 23 or 26, characterized in that the 
data package is brought to contain information on addressee^ enabling, 
position of emergency switch, and movement instructions. 




Fig. 2 
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